$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: 1gX5CHYaeRUu7uUA4hMnnB69gkPRuIF2Duj7TC77cxg= Subject key identifier: 9A:48:C4:7D:30:8A:23:AD:E0:BD:BF:D8:3E:B6:06:F1:E8:82:78:54 Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 03D9E67EC75C586917863BF5ADD43F8C3DE5218D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: C6 Signing time: Fri 09 Oct 2026 16:13:34 +0000 Manifest this update: Fri 09 Oct 2026 16:08:34 +0000 Manifest next update: Tue 13 Oct 2026 02:20:34 +0000 Files and hashes: 1: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) 2: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) 3: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: ZihPlRH9h0Z8OOdwJoFSBhjdI6dD3a23zo7HCb76Dm4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 02:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d9:e6:7e:c7:5c:58:69:17:86:3b:f5:ad:d4:3f:8c:3d:e5:21:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: Oct 9 16:08:34 2026 GMT Not After : Oct 13 02:20:34 2026 GMT Subject: CN=9A48C47D308A23ADE0BDBFD83EB606F1E8827854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dd:f8:11:ec:b4:e2:48:9e:97:1a:9c:ad:5e: a7:c5:9c:60:8f:48:18:28:59:29:a5:56:93:83:b5: ec:0c:0d:65:98:3d:e5:ce:f2:9c:51:8f:7e:08:04: c9:73:8c:18:ee:de:96:c6:7b:6c:69:ba:c9:64:db: 33:47:36:98:4d:c2:af:ef:77:7d:2b:fa:c8:ee:41: f8:e9:8c:a7:d5:43:d7:f3:c0:ff:58:8d:6e:81:f7: df:62:49:85:16:37:87:3e:15:f7:d3:95:06:ae:bd: 43:4f:f3:cb:19:62:56:93:df:4e:f6:80:a8:89:49: 18:62:c5:3e:55:a1:ad:42:02:bc:f2:e1:e5:47:a2: 8f:3b:4a:0a:17:df:69:9a:f5:70:48:5e:c7:0d:be: d5:cc:88:f7:b6:f4:c5:16:2b:82:94:3c:f3:a3:93: c3:83:9d:1f:ac:25:ec:e5:86:4b:2c:09:ad:b9:1f: 9a:86:2b:f1:0d:80:72:9d:e5:6c:96:0b:90:65:6a: d6:fc:fe:18:ef:90:9e:2f:1b:91:3c:03:fd:f9:ef: b2:ba:19:b0:21:21:dd:4b:7b:50:83:6c:14:0d:4f: cb:81:c1:43:d0:e5:12:85:51:d6:77:63:0d:91:a7: 86:1b:11:a6:61:16:cc:97:af:f0:77:18:e8:4c:08: b1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:48:C4:7D:30:8A:23:AD:E0:BD:BF:D8:3E:B6:06:F1:E8:82:78:54 X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e1:00:8a:f1:a6:56:08:ca:86:9e:3f:b3:95:e5:41:1b:57: 1c:ed:76:98:62:c8:01:56:d8:a5:6b:0f:76:9d:e9:7b:f4:14: 8e:1d:34:d6:b7:0b:b8:de:92:aa:4c:69:77:2a:12:40:90:51: de:33:74:8a:a5:c2:4c:17:85:bf:6b:a8:fc:ad:17:bf:7d:b1: 83:ab:26:9e:bb:11:2c:31:2d:d5:e0:c6:40:31:9d:8c:eb:f3: 77:9f:e3:5c:36:69:98:6b:14:59:98:28:c9:8e:c8:5c:d8:ad: c5:1f:2d:1c:87:f6:60:eb:1e:fe:3a:00:78:e4:97:d6:f0:b8: e1:d6:b3:8f:51:73:99:db:8a:c1:63:fa:d7:cd:b5:e1:2e:d7: 4c:20:2d:ee:79:a1:3b:21:92:11:16:08:8e:1a:fb:db:81:4e: ae:b6:47:46:32:80:1f:78:34:cc:13:54:a4:d9:4c:c6:1c:78: a8:1d:32:7d:77:8c:96:46:53:c0:ce:d9:6e:38:ed:b4:53:1f: 8d:c6:c8:9a:2f:ff:ff:40:28:7b:1f:33:21:e1:33:a4:c7:32: 6a:46:d8:77:62:e7:6a:fa:0d:b1:e8:bc:a3:0c:bb:78:7f:61: 9d:1a:c6:be:f2:96:11:fe:8a:c9:65:de:1f:35:04:ef:48:34: b7:97:f2:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA9nmfsdcWGkXhjv1rdQ/jD3lIY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjEwMDkxNjA4MzRaFw0yNjEwMTMwMjIwMzRaMDMxMTAvBgNV BAMTKDlBNDhDNDdEMzA4QTIzQURFMEJEQkZEODNFQjYwNkYxRTg4Mjc4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3fgR7LTiSJ6XGpytXqfFnGCP SBgoWSmlVpODtewMDWWYPeXO8pxRj34IBMlzjBju3pbGe2xpuslk2zNHNphNwq/v d30r+sjuQfjpjKfVQ9fzwP9YjW6B999iSYUWN4c+FffTlQauvUNP88sZYlaT3072 gKiJSRhixT5Voa1CArzy4eVHoo87SgoX32ma9XBIXscNvtXMiPe29MUWK4KUPPOj k8ODnR+sJezlhkssCa25H5qGK/ENgHKd5WyWC5Blatb8/hjvkJ4vG5E8A/3577K6 GbAhId1Le1CDbBQNT8uBwUPQ5RKFUdZ3Yw2Rp4YbEaZhFsyXr/B3GOhMCLEhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmkjEfTCKI63gvb/YPrYG8eiCeFQwHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOEAivGmVgjK hp4/s5XlQRtXHO12mGLIAVbYpWsPdp3pe/QUjh001rcLuN6SqkxpdyoSQJBR3jN0 iqXCTBeFv2uo/K0Xv32xg6smnrsRLDEt1eDGQDGdjOvzd5/jXDZpmGsUWZgoyY7I XNitxR8tHIf2YOse/joAeOSX1vC44dazj1FzmduKwWP618214S7XTCAt7nmhOyGS ERYIjhr724FOrrZHRjKAH3g0zBNUpNlMxhx4qB0yfXeMlkZTwM7ZbjjttFMfjcbI mi///0Aoex8zIeEzpMcyakbYd2LnavoNsei8owy7eH9hnRrGvvKWEf6KyWXeHzUE 70g0t5fyOw== -----END CERTIFICATE-----Generated at Sun Oct 11 22:41:22 2026 by rpki-client